services / Google Cloud / Cloud KMS Key Rings

A Cloud KMS key ring is a logical grouping of keys in the same location.

Cloud KMS is an extremely sensitive service. Keys can be used for encryption/decryption of sensitive data or for the creation or verification of digital signatures.

cloudkms.​keyRings.​listTagBindings

Risks

1. Policy discovery (LOW)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links